Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-82552 (GCVE-0-2026-82552)

Vulnerability from nvd – Published: 2026-08-30 16:45 – Updated: 2026-08-30 16:45 X_Open Source

Title

Linux Foundation Magma gNB Termination ngap_amf.c denial of service

Summary

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngap_amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

CWE

CWE-404 - Denial of Service

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397068	vdb-entry
https://vuldb.com/vuln/397068/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82552	third-party-advisory
https://vuldb.com/submit/891578	third-party-advisory
https://github.com/magma/magma/issues/16019	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "gNB Termination Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngap_amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4,
            "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-404",
              "description": "Denial of Service",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T16:45:06.995Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397068 | Linux Foundation Magma gNB Termination ngap_amf.c denial of service",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397068"
        },
        {
          "name": "VDB-397068 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397068/cti"
        },
        {
          "name": "CVE-2026-82552 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82552"
        },
        {
          "name": "Submit #891578 | Linux Foundation Projects Magma 5G v1.9.0 Denial of Service",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891578"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16019"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:46.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma gNB Termination ngap_amf.c denial of service",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82552",
    "datePublished": "2026-08-30T16:45:06.995Z",
    "dateReserved": "2026-08-29T18:44:16.070Z",
    "dateUpdated": "2026-08-30T16:45:06.995Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82551 (GCVE-0-2026-82551)

Vulnerability from nvd – Published: 2026-08-30 16:30 – Updated: 2026-08-30 16:30 X_Open Source

Title

Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue

Summary

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

CWE

CWE-371 - State Issue

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397067	vdb-entry
https://vuldb.com/vuln/397067/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82551	third-party-advisory
https://vuldb.com/submit/891577	third-party-advisory
https://github.com/magma/magma/issues/16021	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "NGSetup Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-371",
              "description": "State Issue",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T16:30:08.876Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397067 | Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397067"
        },
        {
          "name": "VDB-397067 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397067/cti"
        },
        {
          "name": "CVE-2026-82551 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82551"
        },
        {
          "name": "Submit #891577 | Linux Foundation Projects Magma 5G v1.9.0 State Issue",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891577"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16021"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:41.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82551",
    "datePublished": "2026-08-30T16:30:08.876Z",
    "dateReserved": "2026-08-29T18:44:11.989Z",
    "dateUpdated": "2026-08-30T16:30:08.876Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82550 (GCVE-0-2026-82550)

Vulnerability from nvd – Published: 2026-08-30 15:45 – Updated: 2026-08-30 15:45 X_Open Source

Title

Linux Foundation Magma NGSetupRequest input validation

Summary

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

CWE

CWE-20 - Improper Input Validation

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397066	vdb-entrytechnical-description
https://vuldb.com/vuln/397066/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82550	third-party-advisory
https://vuldb.com/submit/891576	third-party-advisory
https://github.com/magma/magma/issues/16023	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "NGSetupRequest Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T15:45:09.408Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397066 | Linux Foundation Magma NGSetupRequest input validation",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/397066"
        },
        {
          "name": "VDB-397066 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397066/cti"
        },
        {
          "name": "CVE-2026-82550 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82550"
        },
        {
          "name": "Submit #891576 | Linux Foundation Projects Magma 5G v1.9.0 Improper Input Validation",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891576"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16023"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:36.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma NGSetupRequest input validation",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82550",
    "datePublished": "2026-08-30T15:45:09.408Z",
    "dateReserved": "2026-08-29T18:44:07.704Z",
    "dateUpdated": "2026-08-30T15:45:09.408Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82549 (GCVE-0-2026-82549)

Vulnerability from nvd – Published: 2026-08-30 15:30 – Updated: 2026-08-30 15:30 X_Open Source

Title

Linux Foundation Magma SecurityModeComplete integrity check

Summary

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R

8.3 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R

CWE

CWE-354 - Improper Validation of Integrity Check Value
CWE-345 - Insufficient Verification of Data Authenticity

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397065	vdb-entry
https://vuldb.com/vuln/397065/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82549	third-party-advisory
https://vuldb.com/submit/891574	third-party-advisory
https://github.com/magma/magma/issues/16024	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "SecurityModeComplete Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 7.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-354",
              "description": "Improper Validation of Integrity Check Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T15:30:09.964Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397065 | Linux Foundation Magma SecurityModeComplete integrity check",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397065"
        },
        {
          "name": "VDB-397065 | CTI Indicators (IOB, IOC)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397065/cti"
        },
        {
          "name": "CVE-2026-82549 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82549"
        },
        {
          "name": "Submit #891574 | Linux Foundation Projects Magma 5G v1.9.0 Missing Support for Integrity Check",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891574"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16024"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:32.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma SecurityModeComplete integrity check",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82549",
    "datePublished": "2026-08-30T15:30:09.964Z",
    "dateReserved": "2026-08-29T18:44:02.751Z",
    "dateUpdated": "2026-08-30T15:30:09.964Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82548 (GCVE-0-2026-82548)

Vulnerability from nvd – Published: 2026-08-30 15:00 – Updated: 2026-08-30 15:00 X_Open Source

Title

Linux Foundation Magma InitialUEMessage information disclosure

Summary

A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

CWE

CWE-200 - Information Disclosure
CWE-284 - Improper Access Controls

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397064	vdb-entry
https://vuldb.com/vuln/397064/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82548	third-party-advisory
https://vuldb.com/submit/891573	third-party-advisory
https://github.com/magma/magma/issues/16022	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "InitialUEMessage Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "Information Disclosure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T15:00:10.066Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397064 | Linux Foundation Magma InitialUEMessage information disclosure",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397064"
        },
        {
          "name": "VDB-397064 | CTI Indicators (IOB, IOC, TTP)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397064/cti"
        },
        {
          "name": "CVE-2026-82548 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82548"
        },
        {
          "name": "Submit #891573 | Linux Foundation Projects Magma 5G v1.9.0 Exposure of Private Personal Information to an Unauthorized Acto",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891573"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16022"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:27.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma InitialUEMessage information disclosure",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82548",
    "datePublished": "2026-08-30T15:00:10.066Z",
    "dateReserved": "2026-08-29T18:43:58.210Z",
    "dateUpdated": "2026-08-30T15:00:10.066Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82547 (GCVE-0-2026-82547)

Vulnerability from nvd – Published: 2026-08-30 14:45 – Updated: 2026-08-30 14:45 X_Open Source

Title

Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication

Summary

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has been made public and could be used.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R

CWE

CWE-287 - Improper Authentication

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397063	vdb-entry
https://vuldb.com/vuln/397063/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82547	third-party-advisory
https://vuldb.com/submit/891571	third-party-advisory
https://github.com/magma/magma/issues/16020	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Registration Complete Message Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has been made public and could be used."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.4,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T14:45:08.222Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397063 | Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397063"
        },
        {
          "name": "VDB-397063 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397063/cti"
        },
        {
          "name": "CVE-2026-82547 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82547"
        },
        {
          "name": "Submit #891571 | Linux Foundation Projects Magma 5G 1.9.0 Improper Authentication",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891571"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16020"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:23.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82547",
    "datePublished": "2026-08-30T14:45:08.222Z",
    "dateReserved": "2026-08-29T18:43:53.333Z",
    "dateUpdated": "2026-08-30T14:45:08.222Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82552 (GCVE-0-2026-82552)

Vulnerability from cvelistv5 – Published: 2026-08-30 16:45 – Updated: 2026-08-30 16:45 X_Open Source

Title

Linux Foundation Magma gNB Termination ngap_amf.c denial of service

Summary

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngap_amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

CWE

CWE-404 - Denial of Service

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397068	vdb-entry
https://vuldb.com/vuln/397068/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82552	third-party-advisory
https://vuldb.com/submit/891578	third-party-advisory
https://github.com/magma/magma/issues/16019	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "gNB Termination Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngap_amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4,
            "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-404",
              "description": "Denial of Service",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T16:45:06.995Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397068 | Linux Foundation Magma gNB Termination ngap_amf.c denial of service",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397068"
        },
        {
          "name": "VDB-397068 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397068/cti"
        },
        {
          "name": "CVE-2026-82552 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82552"
        },
        {
          "name": "Submit #891578 | Linux Foundation Projects Magma 5G v1.9.0 Denial of Service",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891578"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16019"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:46.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma gNB Termination ngap_amf.c denial of service",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82552",
    "datePublished": "2026-08-30T16:45:06.995Z",
    "dateReserved": "2026-08-29T18:44:16.070Z",
    "dateUpdated": "2026-08-30T16:45:06.995Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82551 (GCVE-0-2026-82551)

Vulnerability from cvelistv5 – Published: 2026-08-30 16:30 – Updated: 2026-08-30 16:30 X_Open Source

Title

Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue

Summary

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

CWE

CWE-371 - State Issue

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397067	vdb-entry
https://vuldb.com/vuln/397067/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82551	third-party-advisory
https://vuldb.com/submit/891577	third-party-advisory
https://github.com/magma/magma/issues/16021	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "NGSetup Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-371",
              "description": "State Issue",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T16:30:08.876Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397067 | Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397067"
        },
        {
          "name": "VDB-397067 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397067/cti"
        },
        {
          "name": "CVE-2026-82551 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82551"
        },
        {
          "name": "Submit #891577 | Linux Foundation Projects Magma 5G v1.9.0 State Issue",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891577"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16021"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:41.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82551",
    "datePublished": "2026-08-30T16:30:08.876Z",
    "dateReserved": "2026-08-29T18:44:11.989Z",
    "dateUpdated": "2026-08-30T16:30:08.876Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82550 (GCVE-0-2026-82550)

Vulnerability from cvelistv5 – Published: 2026-08-30 15:45 – Updated: 2026-08-30 15:45 X_Open Source

Title

Linux Foundation Magma NGSetupRequest input validation

Summary

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

CWE

CWE-20 - Improper Input Validation

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397066	vdb-entrytechnical-description
https://vuldb.com/vuln/397066/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82550	third-party-advisory
https://vuldb.com/submit/891576	third-party-advisory
https://github.com/magma/magma/issues/16023	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "NGSetupRequest Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T15:45:09.408Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397066 | Linux Foundation Magma NGSetupRequest input validation",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/397066"
        },
        {
          "name": "VDB-397066 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397066/cti"
        },
        {
          "name": "CVE-2026-82550 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82550"
        },
        {
          "name": "Submit #891576 | Linux Foundation Projects Magma 5G v1.9.0 Improper Input Validation",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891576"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16023"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:36.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma NGSetupRequest input validation",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82550",
    "datePublished": "2026-08-30T15:45:09.408Z",
    "dateReserved": "2026-08-29T18:44:07.704Z",
    "dateUpdated": "2026-08-30T15:45:09.408Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82549 (GCVE-0-2026-82549)

Vulnerability from cvelistv5 – Published: 2026-08-30 15:30 – Updated: 2026-08-30 15:30 X_Open Source

Title

Linux Foundation Magma SecurityModeComplete integrity check

Summary

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R

8.3 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R

CWE

CWE-354 - Improper Validation of Integrity Check Value
CWE-345 - Insufficient Verification of Data Authenticity

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397065	vdb-entry
https://vuldb.com/vuln/397065/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82549	third-party-advisory
https://vuldb.com/submit/891574	third-party-advisory
https://github.com/magma/magma/issues/16024	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "SecurityModeComplete Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 7.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-354",
              "description": "Improper Validation of Integrity Check Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T15:30:09.964Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397065 | Linux Foundation Magma SecurityModeComplete integrity check",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397065"
        },
        {
          "name": "VDB-397065 | CTI Indicators (IOB, IOC)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397065/cti"
        },
        {
          "name": "CVE-2026-82549 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82549"
        },
        {
          "name": "Submit #891574 | Linux Foundation Projects Magma 5G v1.9.0 Missing Support for Integrity Check",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891574"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16024"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:32.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma SecurityModeComplete integrity check",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82549",
    "datePublished": "2026-08-30T15:30:09.964Z",
    "dateReserved": "2026-08-29T18:44:02.751Z",
    "dateUpdated": "2026-08-30T15:30:09.964Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82548 (GCVE-0-2026-82548)

Vulnerability from cvelistv5 – Published: 2026-08-30 15:00 – Updated: 2026-08-30 15:00 X_Open Source

Title

Linux Foundation Magma InitialUEMessage information disclosure

Summary

A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

CWE

CWE-200 - Information Disclosure
CWE-284 - Improper Access Controls

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397064	vdb-entry
https://vuldb.com/vuln/397064/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82548	third-party-advisory
https://vuldb.com/submit/891573	third-party-advisory
https://github.com/magma/magma/issues/16022	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "InitialUEMessage Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "Information Disclosure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T15:00:10.066Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397064 | Linux Foundation Magma InitialUEMessage information disclosure",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397064"
        },
        {
          "name": "VDB-397064 | CTI Indicators (IOB, IOC, TTP)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397064/cti"
        },
        {
          "name": "CVE-2026-82548 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82548"
        },
        {
          "name": "Submit #891573 | Linux Foundation Projects Magma 5G v1.9.0 Exposure of Private Personal Information to an Unauthorized Acto",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891573"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16022"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:27.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma InitialUEMessage information disclosure",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82548",
    "datePublished": "2026-08-30T15:00:10.066Z",
    "dateReserved": "2026-08-29T18:43:58.210Z",
    "dateUpdated": "2026-08-30T15:00:10.066Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82547 (GCVE-0-2026-82547)

Vulnerability from cvelistv5 – Published: 2026-08-30 14:45 – Updated: 2026-08-30 14:45 X_Open Source

Title

Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication

Summary

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has been made public and could be used.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R

6.5 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R

CWE

CWE-287 - Improper Authentication

Assigner

VulDB mitre root

References

6 references

URL	Tags
https://vuldb.com/vuln/397063	vdb-entry
https://vuldb.com/vuln/397063/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-82547	third-party-advisory
https://vuldb.com/submit/891571	third-party-advisory
https://github.com/magma/magma/issues/16020	exploitissue-tracking
https://www.linuxfoundation.org/	product

Impacted products

1 product

Vendor	Product	Version
Linux Foundation	Magma	Affected: 1.9.0 cpe:2.3:o:linux_foundation:magma::::::::

Credits

shovon0203 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:linux_foundation:magma:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Registration Complete Message Handler"
          ],
          "product": "Magma",
          "vendor": "Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "1.9.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "shovon0203 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has been made public and could be used."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.4,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-30T14:45:08.222Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-397063 | Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/397063"
        },
        {
          "name": "VDB-397063 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/397063/cti"
        },
        {
          "name": "CVE-2026-82547 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-82547"
        },
        {
          "name": "Submit #891571 | Linux Foundation Projects Magma 5G 1.9.0 Improper Authentication",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/891571"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/magma/magma/issues/16020"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.linuxfoundation.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-29T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-29T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-29T20:49:23.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-82547",
    "datePublished": "2026-08-30T14:45:08.222Z",
    "dateReserved": "2026-08-29T18:43:53.333Z",
    "dateUpdated": "2026-08-30T14:45:08.222Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

12 vulnerabilities found for Magma by Linux Foundation

CVE-2026-82552 (GCVE-0-2026-82552)

CVE-2026-82551 (GCVE-0-2026-82551)

CVE-2026-82550 (GCVE-0-2026-82550)

CVE-2026-82549 (GCVE-0-2026-82549)

CVE-2026-82548 (GCVE-0-2026-82548)

CVE-2026-82547 (GCVE-0-2026-82547)

CVE-2026-82552 (GCVE-0-2026-82552)

CVE-2026-82551 (GCVE-0-2026-82551)

CVE-2026-82550 (GCVE-0-2026-82550)

CVE-2026-82549 (GCVE-0-2026-82549)

CVE-2026-82548 (GCVE-0-2026-82548)

CVE-2026-82547 (GCVE-0-2026-82547)